Xweb 300D Pro Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Copeland (0337f2ca-87d7-5998-8541-ed674a0ef7b2) |
|---|---|
| Product | Xweb 300D Pro Firmware (6f6290ea-e8a0-50a0-9ccf-96323c8fa7b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3037 |
vulnerable | 2026-06-08 08:01:17.381191 |
Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1
and prior, enabling an authenticated attacker to achieve remote code
execution on the system by modifying malicious input injected into the
MBird SMS service URL and/or code via the utility route which is later
processed during system setup, leading to remote code execution.
Published: 2026-02-27T01:06:42.223Z
Updated: 2026-02-27T19:09:35.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25721 |
vulnerable | 2026-06-08 07:53:20.256465 |
Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker to achieve remote code execution on the system by
injecting malicious input into the server username and/or password
fields of the restore action in the API V1 route.
Published: 2026-02-27T00:55:28.813Z
Updated: 2026-03-02T14:28:34.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25196 |
vulnerable | 2026-06-08 07:53:19.485102 |
Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker to achieve remote code execution on the system by
injecting malicious input into the Wi-Fi SSID and/or password fields
can lead to remote code execution when the configuration is processed.
Published: 2026-02-27T00:58:08.674Z
Updated: 2026-03-02T14:27:46.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25195 |
vulnerable | 2026-06-08 07:53:19.483695 |
Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker to achieve remote code execution on the system by
supplying a crafted firmware update file via the firmware update route.
Published: 2026-02-27T00:45:04.949Z
Updated: 2026-03-02T14:30:03.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25111 |
vulnerable | 2026-06-08 07:53:18.999748 |
Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection
vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker to achieve remote code execution on the system by
injecting malicious input into requests sent to the restore route.
Published: 2026-02-27T00:40:37.734Z
Updated: 2026-03-02T18:44:08.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25109 |
vulnerable | 2026-06-08 07:53:18.991945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25105 |
vulnerable | 2026-06-08 07:53:18.975734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25085 |
vulnerable | 2026-06-08 07:53:18.936927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25037 |
vulnerable | 2026-06-08 07:53:18.872252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24695 |
vulnerable | 2026-06-08 07:51:17.989444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24689 |
vulnerable | 2026-06-08 07:51:17.985285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24663 |
vulnerable | 2026-06-08 07:51:17.967293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24517 |
vulnerable | 2026-06-08 07:51:17.786335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24452 |
vulnerable | 2026-06-08 07:51:17.695009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23702 |
vulnerable | 2026-06-08 07:51:16.030356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22877 |
vulnerable | 2026-06-08 07:51:14.066551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21718 |
vulnerable | 2026-06-08 07:49:16.706285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21389 |
vulnerable | 2026-06-08 07:49:16.332767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20910 |
vulnerable | 2026-06-08 07:49:13.402596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20902 |
vulnerable | 2026-06-08 07:49:13.396754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20797 |
vulnerable | 2026-06-08 07:49:12.629753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20764 |
vulnerable | 2026-06-08 07:49:12.535100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20742 |
vulnerable | 2026-06-08 07:49:12.519647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.